Bring your own model key

With your own key, Henry sends requests for that provider’s models directly to your account. Your provider bills you for the tokens; Henry records no LLM cost and no LLM-derived credits for those turns.

​

Supported providers

• Anthropic: keys starting sk-ant-.
• OpenAI: standard, project (sk-proj-), and service account (sk-svcacct-) keys.

Leave the provider on Detect from key or choose one explicitly. Keys from other vendors, including OpenRouter, are refused without any network call.

​

Saving a key

Paste the key and click Save key. Henry makes one authenticated models-list call to the provider before storing anything. A key that fails that check is rejected rather than saved. The key is encrypted under your workspace’s own key and never shown again. The card displays the provider and the last four characters.

​

What the key applies to

• Only models from the key’s provider. If you save an Anthropic key, Claude models use it and every other model keeps using Henry’s gateway.
• Not to models served by a self-hosted endpoint (see Self-hosted).
• Gateway failover is disabled on your-key turns. Henry uses the model you chose.

​

Billing

Turns served through your key record zero LLM cost and no LLM credits, and are tagged as such in usage records. Charges that are not model tokens, such as per-request web search fees, still apply. Models the key does not cover charge credits as usual.

​

Rotate and remove

• Rotate: paste a new key. It takes effect on the next turn; there is no cache.
• Remove: future turns bill through Henry’s gateway again, starting with the next turn. Removal is allowed even if the workspace is no longer Enterprise.

If a stored key can no longer be decrypted, the card says so and turns bill Henry’s gateway until you remove and re-add it.

​

Audit

Saving and removing a key writes an audit event recording the provider and key tail only. See Exports for the audit log.